Privilege Escalation Vulnerability in Cisco IOS XE Software

CVE-2025-20199

What is CVE-2025-20199?

A privilege escalation vulnerability exists within the CLI of Cisco IOS XE Software. This flaw permits an authenticated local attacker, who possesses privilege level 15, to manipulate specific configuration commands with specially crafted input, leading to potential root access on the device's underlying operating system. Given that this attack vector requires existing privileges to enter configuration mode, it underscores the importance of proper access controls in network security.

References